The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the user to run standard Maven and Gradle lifecycle commands (e.g., ./mvnw verify, ./gradlew check) to ensure code quality and query correctness. These are routine development operations and do not represent a security risk.
[CREDENTIALS_UNSAFE]: The skill correctly follows best practices for secret management. It explicitly instructs the user to 'Externalize all configuration (never hardcode values)' and uses environment variable placeholders in configuration examples (e.g., ${DATABASE_URL}, ${JWT_SECRET}).
[EXTERNAL_DOWNLOADS]: The skill references standard, well-known libraries and frameworks (e.g., Spring Boot, Hibernate, PostgreSQL, Flyway) within its pom.xml and configuration guides. These are industry-standard dependencies from trusted registries.
[REMOTE_CODE_EXECUTION]: No patterns for remote code execution, such as piping network downloads to a shell, were detected. The skill focuses on local compilation and testing via standard build tools.

java-architect